How to properly secure sysctl on Linux